last executing test programs: 1m44.968582246s ago: executing program 1 (id=1992): sched_setaffinity(0x0, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m44.770549512s ago: executing program 1 (id=1993): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x5) 1m44.624629344s ago: executing program 1 (id=1994): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, r2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602ff820fffff5bab023a0200002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1m44.488121315s ago: executing program 1 (id=1995): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x208000, &(0x7f00000002c0), 0xfc, 0x46d, &(0x7f0000000700)="$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") 1m42.946528391s ago: executing program 1 (id=1997): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x800480, &(0x7f0000000600)=ANY=[], 0x9, 0x193, &(0x7f0000000340)="$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") 1m42.656090304s ago: executing program 1 (id=1998): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x32000c8, &(0x7f0000000640)={[{@nospace_cache}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@discard}, {@thread_pool={'thread_pool', 0x3d, 0x1f}}, {}, {@clear_cache}, {@ref_verify}, {@noflushoncommit}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@space_cache_v2}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0\x00') 1m32.975736834s ago: executing program 2 (id=2006): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x800480, &(0x7f0000000600)=ANY=[], 0x9, 0x193, &(0x7f0000000340)="$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") 1m31.728907116s ago: executing program 2 (id=2008): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 1m30.775522494s ago: executing program 2 (id=2009): mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='befs\x00', 0x0, &(0x7f0000000a80)=',\x00') 1m30.497431236s ago: executing program 2 (id=2010): syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x97709b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x297880, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002d80)={0x2020}, 0x2025) 1m29.985955628s ago: executing program 2 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x17, 0x0, 0x0, "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", 0x0, "f93ef939c4fa333379375c3786c392f4d2179b51"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "f9977d0d9a759a4a"}, 0x6}}]}, 0x14c}}, 0x0) 1m29.506725078s ago: executing program 2 (id=2012): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x7ffffffe) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xfb}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000004}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) epoll_pwait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) 49.958486554s ago: executing program 0 (id=2060): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x4}, @TCA_CODEL_TARGET={0x8}]}}]}, 0x44}}, 0x0) 48.395980872s ago: executing program 0 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) 48.331842717s ago: executing program 3 (id=2064): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000980)='\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 48.161100211s ago: executing program 3 (id=2065): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21}}, 0x50) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) 47.863994155s ago: executing program 0 (id=2066): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 47.742530275s ago: executing program 0 (id=2067): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001080)=@broute={'broute\x00', 0x9a03, 0x0, 0x90, [0x20000780, 0x200007b0], 0x0, 0x0, &(0x7f0000000780)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, {}, {}]}, 0x108) 47.607781756s ago: executing program 0 (id=2068): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000940)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000009c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) 47.43200609s ago: executing program 0 (id=2069): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) 47.225629157s ago: executing program 3 (id=2070): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0xe]}}, 0x0, 0x2b}, 0x20) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x880000, 0x0, 0x4, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdY\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva\x9fknh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xab<\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\x00]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12\x85DX\x8f\xbf\xdbm4', 0x0) io_setup(0xb, &(0x7f0000000040)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0xd0, 0x0, 0x800, 0x0, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdd4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) 43.88050234s ago: executing program 3 (id=2071): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x4}, @TCA_CODEL_TARGET={0x8}]}}]}, 0x44}}, 0x0) 3.049261891s ago: executing program 3 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) 2.968227378s ago: executing program 3 (id=2074): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x38, r3, 0x803, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x40045566, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) 2.636000215s ago: executing program 4 (id=2076): r0 = memfd_create(&(0x7f0000000580)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa7\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6\x00\x00\x00\x00\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x80\xd5=\xcev\x1fS}\x9f\xa8\x84\x1c=\\\x88\xe5\xb0yYM\xf4\xcf\x98m\xd24\xa6;\x84\xf78P.\x00\xf63:\xadd\x05X\xc9\xbe\xabk\x82k\x99\xc9\xac\xab\x83e\xf2L\xd2y\xd1D\x91\x84QlkPe[8\nC\xea]\xaf\xfc\xd3\x91\x91\x8fv\xb6@\xef\x9e\xb2>\xe4\x80\xb8\xe9\xbf\aX\xa5\n\xb4J\xf3P\xb5\xc3d\xfe0\xe2\xdcD\xdcVJ\x03\xaa\x9f\xc79Z\x1a\xda\xac\x1c\x9f\xc8b\xa2\x1ak', 0x7) fallocate(r0, 0x0, 0xfc9f, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7fa5f35fffff, 0x13, r0, 0x0) 2.489790577s ago: executing program 4 (id=2077): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010001000000000000000000000a50000000060a0b0400000025000000000200000024000480200001800700010063740000140002800800044000000016080002400000000d0900010073797a30000000000900020073797a32750e861f65185e1c0c70ad9b086430504204005064cc29342d67a2419ad73f774977d80b2008a747bab88b7728a326d37d9f579cd68bfd82abce715c26693731ccb82c4340437353a4d791dbb0e72ae703a339f682d29563e54174d356b9cf3a55a59d", @ANYRES64=r1], 0x78}}, 0x4080) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x7, 0xcb}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8922, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @hdata="ad65c8435d8a74855146175c4823057931ddd8de52215a0cba4b92c305c136df3a767ec61275c88bbeee48cc3ad39e98881843ed", {}, @esp_ip4_spec={@multicast1, @dev}, {0x0, @local, 0x0, 0x0, [0x0, 0x32]}}}}) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @local}, {0x306, @broadcast}, 0x1c, {0x2, 0x4e23, @private=0xa010100}, 'ip6erspan0\x00'}) r4 = dup2(0xffffffffffffffff, r0) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000000)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x100300) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x9b8}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet6(0xa, 0x6, 0xfffffffe) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) listen(0xffffffffffffffff, 0x8) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e1f, @loopback=0x7f000002}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000a03000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000a2e000/0x4000)=nil, &(0x7f0000905000/0x2000)=nil, &(0x7f00000003c0)="66098143a496e385866f054e0cfb5bd8befca4111def16d514fcc290cdb4640289", 0x21, r6}, 0x64) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040804000000024e04b6811d2e18b6738058f243d927c6d5f7cd4db9b32808b33875994fae09f248deddb3cd345e9bb9a51a6f32e9ff99611e634fb865424c277921228cbe759845abbc90de554f51a983894fc267fb8c7c1a"], 0x7) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x81}, 0x2) 2.214540749s ago: executing program 4 (id=2078): syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000061d22240dd0407803f6b00000004090212000100000200090400000002"], 0x0) 352.007651ms ago: executing program 4 (id=2079): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) socket$kcm(0x29, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000440)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="4103092cc1f7480401020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 176.609476ms ago: executing program 4 (id=2080): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x80045530, 0xffffffffffffffff) 0s ago: executing program 4 (id=2081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 249 > 9 [ 446.690765][ T3562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.698960][ T3562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.707154][ T3562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 446.717091][ T3562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.919572][ T3562] Bluetooth: hci1: command tx timeout [ 447.890382][ T9741] bio_check_eod: 3125 callbacks suppressed [ 447.890399][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.890399][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 447.910876][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.910876][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 447.926729][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.926729][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 447.942472][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.942472][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 447.959295][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.959295][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 447.974041][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.974041][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 447.989554][ T9741] syz.4.1937: attempt to access beyond end of device [ 447.989554][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 448.004032][ T9741] syz.4.1937: attempt to access beyond end of device [ 448.004032][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 448.019770][ T9741] syz.4.1937: attempt to access beyond end of device [ 448.019770][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 448.034386][ T9741] syz.4.1937: attempt to access beyond end of device [ 448.034386][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 448.759627][ T3562] Bluetooth: hci0: command tx timeout [ 448.999244][ T3562] Bluetooth: hci1: command tx timeout [ 450.839239][ T3562] Bluetooth: hci0: command tx timeout [ 452.900991][ T9741] bio_check_eod: 4182 callbacks suppressed [ 452.901007][ T9741] syz.4.1937: attempt to access beyond end of device [ 452.901007][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 452.921552][ T9741] syz.4.1937: attempt to access beyond end of device [ 452.921552][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 452.929410][ T3562] Bluetooth: hci0: command tx timeout [ 452.939653][ T9741] syz.4.1937: attempt to access beyond end of device [ 452.939653][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 452.957940][ T9741] syz.4.1937: attempt to access beyond end of device [ 452.957940][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 452.973397][ T9741] syz.4.1937: attempt to access beyond end of device [ 452.973397][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 452.987803][ T9741] syz.4.1937: attempt to access beyond end of device [ 452.987803][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 453.003557][ T9741] syz.4.1937: attempt to access beyond end of device [ 453.003557][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 453.018088][ T9741] syz.4.1937: attempt to access beyond end of device [ 453.018088][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 453.034965][ T9741] syz.4.1937: attempt to access beyond end of device [ 453.034965][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 453.049508][ T9741] syz.4.1937: attempt to access beyond end of device [ 453.049508][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 454.624421][ T9967] loop2: detected capacity change from 0 to 8 [ 454.631831][ T9967] Filesystem uses "lzma" compression. This is not supported [ 454.903017][ T9931] BTRFS error (device loop1): open_ctree failed [ 455.009235][ T3562] Bluetooth: hci0: command tx timeout [ 455.111296][ T3795] tipc: Left network mode [ 455.116019][ T9941] chnl_net:caif_netlink_parms(): no params data found [ 455.231531][ T9972] can0: slcan on pts0. [ 455.553105][ T9941] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.580780][ T9941] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.618686][ T3564] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 455.636025][ T3550] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 455.649686][ T9941] device bridge_slave_0 entered promiscuous mode [ 455.651741][ T3550] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 455.696179][ T9941] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.717194][ T9971] can0 (unregistered): slcan off pts0. [ 455.740118][ T3550] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 455.747743][ T3550] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 455.756106][ T3564] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 455.799532][ T9941] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.822337][ T9941] device bridge_slave_1 entered promiscuous mode [ 455.927738][ T9979] befs: (nullb0): No write support. Marking filesystem read-only [ 455.986089][ T9979] befs: (nullb0): invalid magic header [ 456.157844][ T9941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.172308][ T9981] loop2: detected capacity change from 0 to 128 [ 456.211263][ T9981] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 456.232535][ T9941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.277761][ T9981] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 456.361259][ T9941] team0: Port device team_slave_0 added [ 456.415044][ T9941] team0: Port device team_slave_1 added [ 456.474875][ T7594] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 456.517005][ T7594] FAT-fs (loop2): Filesystem has been set read-only [ 456.545543][ T7594] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 456.565675][ T9941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.589314][ T9941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.627023][ T9941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.780431][ T9941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.787443][ T9941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.828776][ T9941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.949042][ T9976] chnl_net:caif_netlink_parms(): no params data found [ 457.126181][ T9941] device hsr_slave_0 entered promiscuous mode [ 457.161371][ T9941] device hsr_slave_1 entered promiscuous mode [ 457.188491][ T9941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.199185][ T9941] Cannot create hsr debugfs directory [ 457.641838][ T9856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.809471][ T3562] Bluetooth: hci6: command tx timeout [ 457.890591][ T3564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 457.902451][ T3564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 457.910644][ T9741] bio_check_eod: 3216 callbacks suppressed [ 457.910659][ T9741] syz.4.1937: attempt to access beyond end of device [ 457.910659][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 457.912649][ T3564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 457.918599][ T9741] syz.4.1937: attempt to access beyond end of device [ 457.918599][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 457.952683][ T3564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 457.955966][ T9741] syz.4.1937: attempt to access beyond end of device [ 457.955966][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 457.963204][ T3564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 457.977166][ T9741] syz.4.1937: attempt to access beyond end of device [ 457.977166][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 457.987839][ T3564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.000616][ T9741] syz.4.1937: attempt to access beyond end of device [ 458.000616][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 458.020161][ T9741] syz.4.1937: attempt to access beyond end of device [ 458.020161][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 458.037117][ T9741] syz.4.1937: attempt to access beyond end of device [ 458.037117][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 458.051780][ T9741] syz.4.1937: attempt to access beyond end of device [ 458.051780][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 458.068325][ T9741] syz.4.1937: attempt to access beyond end of device [ 458.068325][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 458.083154][ T9741] syz.4.1937: attempt to access beyond end of device [ 458.083154][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 458.823603][ T9856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.871268][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.878423][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.897078][ T9976] device bridge_slave_0 entered promiscuous mode [ 458.947981][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.963423][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.979535][ T9976] device bridge_slave_1 entered promiscuous mode [ 459.120966][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.157542][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.315583][ T9976] team0: Port device team_slave_0 added [ 459.339803][ T9976] team0: Port device team_slave_1 added [ 459.432325][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.459111][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.501789][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.525387][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 459.545211][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.559112][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.595343][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.769508][ T9976] device hsr_slave_0 entered promiscuous mode [ 459.786678][ T9976] device hsr_slave_1 entered promiscuous mode [ 459.797273][ T9976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.817982][ T9976] Cannot create hsr debugfs directory [ 459.879642][ T3564] Bluetooth: hci6: command tx timeout [ 460.039720][ T3564] Bluetooth: hci3: command tx timeout [ 460.628723][ T9856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.652178][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.664387][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.674023][ T9988] device bridge_slave_0 entered promiscuous mode [ 460.722116][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.739695][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.749242][ T9988] device bridge_slave_1 entered promiscuous mode [ 460.824583][ T9856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.996789][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.202160][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.530304][ T9988] team0: Port device team_slave_0 added [ 461.573392][ T3795] device hsr_slave_0 left promiscuous mode [ 461.590693][ T3795] device hsr_slave_1 left promiscuous mode [ 461.598044][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.618449][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.631083][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.638544][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.646530][ T3795] device bridge_slave_1 left promiscuous mode [ 461.653261][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.670128][ T3795] device bridge_slave_0 left promiscuous mode [ 461.676417][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.759820][ T3795] device veth1_macvtap left promiscuous mode [ 461.765907][ T3795] device veth0_macvtap left promiscuous mode [ 461.783578][ T3795] device veth1_vlan left promiscuous mode [ 461.796471][ T3795] device veth0_vlan left promiscuous mode [ 461.959771][ T3564] Bluetooth: hci6: command tx timeout [ 462.119713][ T3564] Bluetooth: hci3: command tx timeout [ 462.126376][ T3795] bond1 (unregistering): Released all slaves [ 462.919279][ T9741] bio_check_eod: 2877 callbacks suppressed [ 462.919300][ T9741] syz.4.1937: attempt to access beyond end of device [ 462.919300][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 462.941651][ T9741] syz.4.1937: attempt to access beyond end of device [ 462.941651][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 462.956656][ T9741] syz.4.1937: attempt to access beyond end of device [ 462.956656][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 462.973454][ T9741] syz.4.1937: attempt to access beyond end of device [ 462.973454][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 462.989298][ T9741] syz.4.1937: attempt to access beyond end of device [ 462.989298][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 463.005863][ T9741] syz.4.1937: attempt to access beyond end of device [ 463.005863][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 463.020740][ T9741] syz.4.1937: attempt to access beyond end of device [ 463.020740][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 463.037208][ T9741] syz.4.1937: attempt to access beyond end of device [ 463.037208][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 463.043783][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 463.051851][ T9741] syz.4.1937: attempt to access beyond end of device [ 463.051851][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 463.075715][ T9741] syz.4.1937: attempt to access beyond end of device [ 463.075715][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 463.178743][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 463.282367][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.382549][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.054449][ T3564] Bluetooth: hci6: command tx timeout [ 464.226850][ T3564] Bluetooth: hci3: command tx timeout [ 464.595252][ T3795] bond0 (unregistering): Released all slaves [ 464.724810][ T9900] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 464.743204][ T9988] team0: Port device team_slave_1 added [ 464.816109][ T9941] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.901151][ T9900] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 464.932164][ T9900] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.020648][ T9941] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.073124][ T9900] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.171636][ T9941] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.197954][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.211573][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.251238][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.382840][ T9941] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.412841][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.429448][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.466759][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.576624][ T9988] device hsr_slave_0 entered promiscuous mode [ 465.595096][ T9988] device hsr_slave_1 entered promiscuous mode [ 465.616808][ T9988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.630066][ T9988] Cannot create hsr debugfs directory [ 465.706622][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.766036][ T9900] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.844328][ T9900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 465.862053][ T9900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.225484][ T9900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.279355][ T3564] Bluetooth: hci3: command tx timeout [ 466.320498][ T9900] device veth0_vlan entered promiscuous mode [ 466.344728][ T9900] device veth1_vlan entered promiscuous mode [ 466.418412][ T9900] device veth0_macvtap entered promiscuous mode [ 466.432756][ T9900] device veth1_macvtap entered promiscuous mode [ 466.477263][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.495922][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.510873][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.538619][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.554251][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.570424][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.589121][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.611876][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.624499][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.682885][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.710070][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.718200][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.770246][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.799759][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.806924][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.849524][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.858432][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.899846][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.906987][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.934656][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.970313][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.999499][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.008616][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.060106][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.099397][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.128279][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.161114][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.180177][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.209330][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.236135][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.259521][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.267260][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.310119][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 467.318987][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.372116][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.410324][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 467.428283][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 467.460006][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 467.489937][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 467.498617][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 467.529977][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.572918][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.614205][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.633222][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.652768][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.667616][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.679332][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.687349][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 467.929750][ T9741] bio_check_eod: 2732 callbacks suppressed [ 467.929773][ T9741] syz.4.1937: attempt to access beyond end of device [ 467.929773][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 467.951925][ T9741] syz.4.1937: attempt to access beyond end of device [ 467.951925][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 467.966640][ T9741] syz.4.1937: attempt to access beyond end of device [ 467.966640][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 467.982990][ T9741] syz.4.1937: attempt to access beyond end of device [ 467.982990][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 467.997805][ T9741] syz.4.1937: attempt to access beyond end of device [ 467.997805][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 468.014372][ T9741] syz.4.1937: attempt to access beyond end of device [ 468.014372][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 468.029315][ T9741] syz.4.1937: attempt to access beyond end of device [ 468.029315][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 468.045675][ T9741] syz.4.1937: attempt to access beyond end of device [ 468.045675][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 468.060444][ T9741] syz.4.1937: attempt to access beyond end of device [ 468.060444][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 468.077078][ T9741] syz.4.1937: attempt to access beyond end of device [ 468.077078][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 468.612689][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.623537][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.633427][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.643906][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.708591][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.739309][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.768285][ T9900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.799317][ T9900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.860677][ T9900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.880377][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.909992][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.185991][ T9941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.216727][ T9941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.237386][ T9941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.265340][ T9941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.446832][ T9941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.492756][ T9941] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.587608][ T9941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.601501][ T9941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.646257][ T9900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.668283][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.692529][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.709024][ T9900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.829281][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.837316][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.881383][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.920324][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.960189][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.967342][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.009587][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.038960][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.047877][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.055057][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.074146][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.087935][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.103864][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.119822][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.128802][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.148681][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.168178][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.178205][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.196187][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.217781][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.336983][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.350928][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.359040][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.627064][ T9856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.807311][ T9976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.876270][ T9856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.900152][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.908406][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.937329][ T9856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.962963][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.971396][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.982686][ T9941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.014727][ T9856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.051774][ T5185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 471.083930][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.092998][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.102697][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.111237][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.169800][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 471.236944][ T9941] device veth0_vlan entered promiscuous mode [ 471.283887][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.293728][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.341265][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.364299][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.381610][ T9941] device veth1_vlan entered promiscuous mode [ 471.495602][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.520196][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.555605][ T9941] device veth0_macvtap entered promiscuous mode [ 471.599891][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.608645][ T9941] device veth1_macvtap entered promiscuous mode [ 471.640214][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.648437][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.857742][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 471.866882][ T6972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 471.968490][T10008] ptrace attach of "./syz-executor exec"[9900] was attempted by "./syz-executor exec"[10008] [ 472.823542][ T9856] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.869380][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.885084][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.907078][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.921364][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.940232][ T9741] bio_check_eod: 2373 callbacks suppressed [ 472.940256][ T9741] syz.4.1937: attempt to access beyond end of device [ 472.940256][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 472.945180][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.946878][ T9741] syz.4.1937: attempt to access beyond end of device [ 472.946878][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 472.971651][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.987237][ T9741] syz.4.1937: attempt to access beyond end of device [ 472.987237][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 473.009595][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.009595][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 473.025963][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.025963][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 473.039508][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.040722][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.040722][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 473.066816][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.066816][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 473.072531][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.081529][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.081529][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 473.107463][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.107463][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 473.122179][ T9741] syz.4.1937: attempt to access beyond end of device [ 473.122179][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 473.125477][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.162122][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.194570][ T9941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.302182][ T9976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.349362][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 473.358208][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 473.400970][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.427005][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.447515][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.454674][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.469675][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.482808][ T5186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.499901][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.507052][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.526077][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.547334][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.564394][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.584033][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.599258][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.619297][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.630642][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.641935][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.655523][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.666174][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.678199][ T9941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.694998][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.704010][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.713179][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.722457][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.906294][ T3795] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.082905][ T3795] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.183140][ T3795] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.273741][ T3795] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.617458][ T3795] tipc: Left network mode [ 475.663882][ T9976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.811443][ T9976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.368592][T10032] loop3: detected capacity change from 0 to 4096 [ 476.426916][T10033] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 476.471163][ T27] audit: type=1804 audit(1720738316.908:122): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2024" name="/newroot/11/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 476.613741][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.625935][ T9941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.656652][ T9941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.670425][ T9941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.687928][ T9941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.652100][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.675339][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.692201][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.710145][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.728725][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 477.739467][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 477.748082][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.767686][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.781359][ T9856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.950439][ T9741] bio_check_eod: 2866 callbacks suppressed [ 477.950460][ T9741] syz.4.1937: attempt to access beyond end of device [ 477.950460][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 477.971069][ T9741] syz.4.1937: attempt to access beyond end of device [ 477.971069][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 477.988059][ T9741] syz.4.1937: attempt to access beyond end of device [ 477.988059][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 478.002772][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.002772][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 478.018891][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.018891][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 478.033792][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.033792][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 478.050535][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.050535][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 478.064911][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.065432][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.065432][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 478.088858][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.088858][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 478.104097][ T9741] syz.4.1937: attempt to access beyond end of device [ 478.104097][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 478.300796][ T3656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.329441][ T3656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.423200][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 478.454010][ T3656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.478230][ T3656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.562023][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.965317][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.978805][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.182781][T10058] loop0: detected capacity change from 0 to 4096 [ 479.203017][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.217287][T10058] ntfs: (device loop0): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 480.731975][T10066] loop3: detected capacity change from 0 to 128 [ 480.831990][T10066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 480.862944][T10066] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038 (0x7fffffff) [ 481.112888][ T9900] EXT4-fs (loop3): unmounting filesystem. [ 481.342933][ T9976] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.431861][ T9976] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.542695][ T9976] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.601412][ T9976] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.860481][ T9856] device veth0_vlan entered promiscuous mode [ 481.913694][ T9856] device veth1_vlan entered promiscuous mode [ 481.933671][T10084] loop0: detected capacity change from 0 to 8192 [ 481.976216][T10084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 482.232112][T10084] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 482.250106][T10084] REISERFS (device loop0): using ordered data mode [ 482.258332][T10084] reiserfs: using flush barriers [ 482.624347][ T27] audit: type=1800 audit(1720738322.768:123): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2041" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 482.961774][ T9741] bio_check_eod: 2600 callbacks suppressed [ 482.961796][ T9741] syz.4.1937: attempt to access beyond end of device [ 482.961796][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 482.982343][ T9741] syz.4.1937: attempt to access beyond end of device [ 482.982343][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 482.998643][ T9741] syz.4.1937: attempt to access beyond end of device [ 482.998643][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 483.006915][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 483.013314][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.013314][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 483.022839][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.037588][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.037588][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 483.044051][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.057798][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.057798][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 483.065787][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.081174][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.081174][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 483.087171][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 483.100655][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.100655][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 483.110998][T10084] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 483.124069][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.124069][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 483.152380][ T9741] syz.4.1937: attempt to access beyond end of device [ 483.152380][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 483.180033][ T3743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 483.240088][ T9856] device veth0_macvtap entered promiscuous mode [ 483.248103][T10084] REISERFS (device loop0): checking transaction log (loop0) [ 483.283177][ T9988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.326892][T10084] REISERFS (device loop0): Using r5 hash to sort names [ 483.351606][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.369874][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.409850][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 483.430270][T10084] reiserfs: enabling write barrier flush mode [ 483.450112][ T9970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.577295][T10084] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 484.150277][T10095] loop3: detected capacity change from 0 to 32768 [ 484.188229][T10095] XFS (loop3): Mounting V5 Filesystem [ 484.249872][T10095] XFS (loop3): Starting recovery (logdev: internal) [ 484.296406][T10095] XFS (loop3): Ending recovery (logdev: internal) [ 484.630484][ T9900] XFS (loop3): Unmounting Filesystem [ 484.640833][ T9856] device veth1_macvtap entered promiscuous mode [ 484.664924][ T9988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 484.717128][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 484.730180][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 484.758736][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.785716][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.799196][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.819145][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.828994][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.855387][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.871076][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.891804][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.911443][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.928830][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.942643][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.965936][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.004649][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.023667][ T9988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.116925][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.130706][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.147950][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.168194][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.191289][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.215417][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.235928][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.265643][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.281969][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.299290][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.329455][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.346439][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.371602][ T9856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.391306][ T9856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.450062][ T9856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.701230][ T9988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.729755][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.741345][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.773095][ T9856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.809602][ T9856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.838174][ T9856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.857461][ T9856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.971878][ T9741] bio_check_eod: 2774 callbacks suppressed [ 487.971902][ T9741] syz.4.1937: attempt to access beyond end of device [ 487.971902][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 487.992559][ T9741] syz.4.1937: attempt to access beyond end of device [ 487.992559][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 488.009138][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.009138][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 488.024562][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.024562][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 488.041116][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.041116][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 488.055897][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.055897][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 488.072301][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.072301][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 488.087101][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.087101][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 488.103574][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.103574][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 488.118516][ T9741] syz.4.1937: attempt to access beyond end of device [ 488.118516][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 489.479218][T10119] Bluetooth: MGMT ver 1.22 [ 489.563281][T10119] loop0: detected capacity change from 0 to 512 [ 489.634898][T10119] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2760: inode #11: comm syz.0.2043: corrupted xattr block 95 [ 489.651932][T10119] EXT4-fs (loop0): Remounting filesystem read-only [ 489.658967][T10119] EXT4-fs error (device loop0): ext4_evict_inode:290: comm syz.0.2043: couldn't truncate inode 11 (err -30) [ 489.695804][T10119] EXT4-fs (loop0): 1 orphan inode deleted [ 489.701722][T10119] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 489.756177][T10124] loop3: detected capacity change from 0 to 128 [ 489.781885][T10124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 489.806966][T10124] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff) [ 489.950696][ T9941] EXT4-fs (loop0): unmounting filesystem. [ 490.081735][ T9900] EXT4-fs (loop3): unmounting filesystem. [ 492.981017][ T9741] bio_check_eod: 2412 callbacks suppressed [ 492.981042][ T9741] syz.4.1937: attempt to access beyond end of device [ 492.981042][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 493.001846][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.001846][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 493.018443][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.018443][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 493.033308][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.033308][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 493.050621][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.050621][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 493.065406][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.065406][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 493.081847][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.081847][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 493.096683][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.096683][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 493.113106][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.113106][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 493.127904][ T9741] syz.4.1937: attempt to access beyond end of device [ 493.127904][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 493.611474][ T3562] Bluetooth: hci2: command 0x0406 tx timeout [ 495.150044][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.249112][ T9976] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.403819][ T9976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 495.438702][ T9976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 495.632270][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.651797][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.692622][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.733904][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.776088][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.783344][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.815676][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 495.832844][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.851892][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.859161][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.870665][ T3562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 495.883527][ T3562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 495.895383][ T3550] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 495.903798][ T3550] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 495.912666][ T3562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 495.920249][ T3562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 495.966473][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 495.985565][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.004631][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.027838][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.044193][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 496.065673][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 496.082575][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.103442][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.124382][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.138717][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.157007][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.179952][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 496.209284][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 496.301841][T10163] tipc: Started in network mode [ 496.306766][T10163] tipc: Node identity 00000000004003000000000000000001, cluster identity 4711 [ 496.340049][T10163] tipc: Enabling of bearer rejected, failed to enable media [ 497.959340][ T3562] Bluetooth: hci4: command tx timeout [ 497.990138][ T9741] bio_check_eod: 2434 callbacks suppressed [ 497.990164][ T9741] syz.4.1937: attempt to access beyond end of device [ 497.990164][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 498.009571][T10180] syz.3.2062[10180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.011763][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.011763][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 498.034406][T10180] syz.3.2062[10180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.041399][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.041399][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 498.068673][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.068673][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 498.085256][T10173] netlink: 'syz.0.2060': attribute type 5 has an invalid length. [ 498.085427][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.085427][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 498.107729][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.107729][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 498.124235][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.124235][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 498.138963][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.138963][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 498.155346][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.155346][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 498.170042][ T9741] syz.4.1937: attempt to access beyond end of device [ 498.170042][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 498.663930][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.124313][T10166] chnl_net:caif_netlink_parms(): no params data found [ 499.300866][T10166] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.316192][T10166] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.349949][T10166] device bridge_slave_0 entered promiscuous mode [ 499.380497][T10166] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.403371][T10166] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.430856][T10166] device bridge_slave_1 entered promiscuous mode [ 500.597921][ T3562] Bluetooth: hci4: command tx timeout [ 500.697249][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.745254][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.816301][ T9988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 500.837893][ T9988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.252882][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.259281][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.288913][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.377784][ T9988] device veth0_vlan entered promiscuous mode [ 501.411586][ T9988] device veth1_vlan entered promiscuous mode [ 501.473562][ T9988] device veth0_macvtap entered promiscuous mode [ 501.495928][ T9988] device veth1_macvtap entered promiscuous mode [ 501.553712][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.574866][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.589794][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.608140][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.624097][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.640150][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.650292][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.662043][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.679227][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.701015][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.719974][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.744845][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.769331][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.789164][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.812496][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.436476][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.444162][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.451829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.459827][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.467771][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.476658][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.485201][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.492355][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.502548][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.520233][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.538981][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.546193][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.565972][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.587265][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.693591][ T3564] Bluetooth: hci4: command tx timeout [ 502.715576][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.736990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.758250][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.780478][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.799964][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.819475][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.828246][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.850027][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.868066][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.889366][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.896913][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.917483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.941685][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.959670][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.968259][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.988551][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.001695][ T9741] bio_check_eod: 2308 callbacks suppressed [ 503.001717][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.001717][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 503.008449][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.022665][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.022665][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 503.042318][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.046345][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.046345][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 503.066231][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.066231][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 503.070110][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.083525][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.083525][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 503.102140][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.102140][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 503.110111][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.118725][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.118725][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 503.138643][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.138643][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 503.151249][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.155300][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.155300][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 503.177294][ T9741] syz.4.1937: attempt to access beyond end of device [ 503.177294][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 503.262555][ T3795] device hsr_slave_0 left promiscuous mode [ 503.287412][ T3795] device hsr_slave_1 left promiscuous mode [ 503.298775][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.317353][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.327951][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.347030][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.357907][ T3795] device bridge_slave_1 left promiscuous mode [ 503.371839][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.391257][ T3795] device bridge_slave_0 left promiscuous mode [ 503.405299][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.433928][ T3795] device hsr_slave_0 left promiscuous mode [ 503.447550][ T3795] device hsr_slave_1 left promiscuous mode [ 503.462794][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.478242][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.494512][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.508893][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.524424][ T3795] device bridge_slave_1 left promiscuous mode [ 503.537582][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.557079][ T3795] device bridge_slave_0 left promiscuous mode [ 503.569259][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.597579][ T3795] device hsr_slave_0 left promiscuous mode [ 503.612840][ T3795] device hsr_slave_1 left promiscuous mode [ 503.631273][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.640729][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.648946][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.659460][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.667414][ T3795] device bridge_slave_1 left promiscuous mode [ 503.675199][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.695341][ T3795] device bridge_slave_0 left promiscuous mode [ 503.709317][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.924653][ T3795] device veth1_macvtap left promiscuous mode [ 503.937631][ T3795] device veth0_macvtap left promiscuous mode [ 503.948653][ T3795] device veth1_vlan left promiscuous mode [ 503.962179][ T3795] device veth0_vlan left promiscuous mode [ 503.978022][ T3795] device veth1_macvtap left promiscuous mode [ 503.991026][ T3795] device veth0_macvtap left promiscuous mode [ 504.005451][ T3795] device veth1_vlan left promiscuous mode [ 504.016889][ T3795] device veth0_vlan left promiscuous mode [ 504.037090][ T3795] device veth1_macvtap left promiscuous mode [ 504.050425][ T3795] device veth0_macvtap left promiscuous mode [ 504.063303][ T3795] device veth1_vlan left promiscuous mode [ 504.075982][ T3795] device veth0_vlan left promiscuous mode [ 504.759259][ T3562] Bluetooth: hci4: command tx timeout [ 506.073649][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 506.189375][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 506.317953][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.443170][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.009871][ T9741] bio_check_eod: 2798 callbacks suppressed [ 508.009895][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.009895][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 508.030617][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.030617][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 508.047036][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.047036][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 508.062251][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.062251][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 508.077869][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.077869][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 508.093513][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.093513][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 508.108860][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.108860][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 508.123866][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.123866][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 508.139358][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.139358][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 508.154172][ T9741] syz.4.1937: attempt to access beyond end of device [ 508.154172][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 509.751488][ T3795] bond0 (unregistering): Released all slaves [ 509.879966][ T3564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 509.891446][ T3564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 509.900529][ T3564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 509.908393][ T3564] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 509.916067][ T3564] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 509.923612][ T3564] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 510.687832][ T3795] bond1 (unregistering): Released all slaves [ 511.959394][ T3562] Bluetooth: hci5: command tx timeout [ 512.779013][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 512.923955][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 513.019175][ T9741] bio_check_eod: 3079 callbacks suppressed [ 513.019199][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.019199][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 513.041455][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.041455][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 513.056357][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.056357][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 513.072782][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.072782][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 513.087541][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.087541][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 513.103951][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.103951][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 513.119609][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.119609][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 513.135921][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.135921][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 513.150693][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.150693][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 513.151053][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.167166][ T9741] syz.4.1937: attempt to access beyond end of device [ 513.167166][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 513.382726][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.440385][ T3564] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 513.452254][ T3564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 513.461119][ T3564] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 513.470958][ T3564] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 513.481361][ T3564] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 513.488696][ T3564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 514.039427][ T3562] Bluetooth: hci5: command tx timeout [ 515.412048][ T3564] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 515.423069][ T3564] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 515.432052][ T3564] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 515.453661][ T3564] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 515.461451][ T3564] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 515.469563][ T3564] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 515.560810][ T3562] Bluetooth: hci7: command tx timeout [ 516.081298][ T3795] bond0 (unregistering): Released all slaves [ 516.119259][ T3562] Bluetooth: hci5: command tx timeout [ 517.308174][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 517.435789][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 517.560421][ T3562] Bluetooth: hci8: command tx timeout [ 517.580123][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.639397][ T3562] Bluetooth: hci7: command tx timeout [ 518.029633][ T9741] bio_check_eod: 2913 callbacks suppressed [ 518.029654][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.029654][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 518.050498][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.050498][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 518.067013][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.067013][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 518.081861][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.081861][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 518.098214][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.098214][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 518.113360][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.113360][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 518.130608][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.130608][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 518.145438][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.145438][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 518.161821][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.161821][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 518.176689][ T9741] syz.4.1937: attempt to access beyond end of device [ 518.176689][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 518.199481][ T3562] Bluetooth: hci5: command tx timeout [ 518.280122][ T3564] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 518.299315][ T3564] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 518.309345][ T3564] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 518.317364][ T3564] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 518.325221][ T3564] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 518.332905][ T3564] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 518.682622][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.639615][ T3562] Bluetooth: hci8: command tx timeout [ 519.726371][ T3562] Bluetooth: hci7: command tx timeout [ 520.087439][ T3795] bond0 (unregistering): Released all slaves [ 520.234962][T10202] team_slave_1: mtu greater than device maximum [ 520.249605][T10202] team0: Device team_slave_1 failed to change mtu [ 520.303220][T10166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.342311][T10166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.359315][ T3562] Bluetooth: hci9: command tx timeout [ 520.471366][T10166] team0: Port device team_slave_0 added [ 520.500314][T10166] team0: Port device team_slave_1 added [ 520.578293][T10166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.609164][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.655829][T10166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.619884][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.639430][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.647555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.668029][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.678450][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.698001][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.719967][ T3562] Bluetooth: hci8: command tx timeout [ 521.799294][ T3562] Bluetooth: hci7: command tx timeout [ 522.439248][ T3562] Bluetooth: hci9: command tx timeout [ 522.649227][T10212] netlink: 'syz.3.2071': attribute type 5 has an invalid length. [ 522.990337][T10166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.997335][T10166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.039194][ T9741] bio_check_eod: 2990 callbacks suppressed [ 523.039216][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.039216][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 523.060603][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.060603][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 523.077019][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.077019][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 523.092320][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.092320][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 523.108593][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.108593][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 523.123405][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.123405][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 523.139715][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.139715][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 523.155292][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.155292][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 523.171687][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.171687][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 523.186512][ T9741] syz.4.1937: attempt to access beyond end of device [ 523.186512][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 523.200278][T10166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.447600][T10166] device hsr_slave_0 entered promiscuous mode [ 523.480057][T10166] device hsr_slave_1 entered promiscuous mode [ 523.799684][ T3562] Bluetooth: hci8: command tx timeout [ 524.519275][ T3562] Bluetooth: hci9: command tx timeout [ 524.952649][T10217] chnl_net:caif_netlink_parms(): no params data found [ 525.108867][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.129247][T10217] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.137869][T10217] device bridge_slave_0 entered promiscuous mode [ 525.159317][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.166450][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.188176][T10217] device bridge_slave_1 entered promiscuous mode [ 525.258450][T10217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.283470][T10217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.378376][T10217] team0: Port device team_slave_0 added [ 525.401233][T10217] team0: Port device team_slave_1 added [ 525.463188][T10217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.479165][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.517460][T10217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.541377][T10217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.548357][T10217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.596496][T10217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.599350][ T3562] Bluetooth: hci9: command tx timeout [ 528.049674][ T9741] bio_check_eod: 2950 callbacks suppressed [ 528.049697][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.049697][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 528.071018][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.071018][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 528.087440][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.087440][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 528.102265][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.102265][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 528.118639][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.118639][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 528.135568][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.135568][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 528.151977][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.151977][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 528.167584][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.167584][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 528.183984][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.183984][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 528.198891][ T9741] syz.4.1937: attempt to access beyond end of device [ 528.198891][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 528.725581][T10166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.821791][T10217] device hsr_slave_0 entered promiscuous mode [ 528.848787][T10217] device hsr_slave_1 entered promiscuous mode [ 528.878833][T10217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.904283][T10217] Cannot create hsr debugfs directory [ 529.710458][T10166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.864654][T10220] chnl_net:caif_netlink_parms(): no params data found [ 531.022753][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.039350][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.049017][T10220] device bridge_slave_0 entered promiscuous mode [ 531.078784][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.098242][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.106766][T10220] device bridge_slave_1 entered promiscuous mode [ 531.186572][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.209472][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.278190][T10220] team0: Port device team_slave_0 added [ 531.303513][T10220] team0: Port device team_slave_1 added [ 531.369503][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.376490][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.417266][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.440482][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.447551][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.484488][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.576716][T10220] device hsr_slave_0 entered promiscuous mode [ 531.594433][T10220] device hsr_slave_1 entered promiscuous mode [ 531.607064][T10220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.624929][T10220] Cannot create hsr debugfs directory [ 531.710568][T10166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.837392][T10166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.101841][T10217] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.204081][T10217] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.313310][T10217] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.421539][T10217] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.814513][ T3795] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.886983][T10166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.923228][T10214] chnl_net:caif_netlink_parms(): no params data found [ 532.984507][T10166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.059202][ T9741] bio_check_eod: 2779 callbacks suppressed [ 533.059220][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.059220][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 533.061556][T10166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.067986][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.067986][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 533.105617][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.105617][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 533.122097][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.122097][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 533.137017][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.137017][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 533.153243][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.153243][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 533.168014][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.168014][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 533.176406][T10166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 533.184349][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.184349][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 533.203122][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.203122][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 533.219529][ T9741] syz.4.1937: attempt to access beyond end of device [ 533.219529][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 533.333510][T10217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 533.484048][T10217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 533.507015][T10223] chnl_net:caif_netlink_parms(): no params data found [ 533.545647][T10217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 533.600590][T10217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 533.616927][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.626261][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.634903][T10214] device bridge_slave_0 entered promiscuous mode [ 533.733509][T10166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.749621][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.756836][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.778618][T10214] device bridge_slave_1 entered promiscuous mode [ 533.818299][ T3795] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.000833][T10166] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.073566][ T3795] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.099517][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.107621][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.183494][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.197125][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.219964][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.239768][ T3856] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.247105][ T3856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.268477][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.280996][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.300250][ T3856] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.307486][ T3856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.417103][ T3795] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.464200][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.479686][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.488161][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.510598][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.521265][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.541494][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.667819][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.690240][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.711400][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.730124][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.749853][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.781330][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.788485][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.808840][T10223] device bridge_slave_0 entered promiscuous mode [ 534.837568][T10166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.865200][T10166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.945941][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.955814][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.980113][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.987302][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.010532][T10223] device bridge_slave_1 entered promiscuous mode [ 535.038994][T10217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.055491][T10214] team0: Port device team_slave_0 added [ 535.158034][T10217] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.193627][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 535.220416][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 535.251224][T10214] team0: Port device team_slave_1 added [ 535.311518][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.321716][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.350014][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.357161][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.391027][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 535.410014][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 535.429762][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.436888][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.491692][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.530122][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 535.538327][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 535.570303][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 535.623759][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.660232][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 535.681290][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 535.700946][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.707934][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.773665][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.820886][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.839453][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 535.850147][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 535.870054][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.889744][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.914693][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.942313][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.051568][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.105537][T10217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.130550][T10217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.169540][T10166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.201004][ T3795] tipc: Left network mode [ 536.210498][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.229874][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.253876][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.279687][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 536.293733][T10223] team0: Port device team_slave_0 added [ 536.498230][T10223] team0: Port device team_slave_1 added [ 536.580448][T10214] device hsr_slave_0 entered promiscuous mode [ 536.610496][T10214] device hsr_slave_1 entered promiscuous mode [ 536.619785][T10214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.627384][T10214] Cannot create hsr debugfs directory [ 537.382899][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.400187][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.447645][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.619951][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.627574][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.657082][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.664792][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.704710][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.734721][T10217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.801890][T10166] device veth0_vlan entered promiscuous mode [ 537.922547][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.940388][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.959938][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.979822][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.014902][T10166] device veth1_vlan entered promiscuous mode [ 538.053769][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.063124][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.070896][ T9741] bio_check_eod: 2707 callbacks suppressed [ 538.070914][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.070914][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 538.091702][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.091702][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 538.092070][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.108243][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.108243][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 538.127761][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.127761][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 538.144230][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.144230][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 538.159438][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.159438][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 538.175802][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.175802][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 538.190977][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.190977][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 538.207712][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.207712][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 538.222882][ T9741] syz.4.1937: attempt to access beyond end of device [ 538.222882][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 538.230003][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 538.258959][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.280198][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.314145][T10166] device veth0_macvtap entered promiscuous mode [ 538.334906][T10223] device hsr_slave_0 entered promiscuous mode [ 538.350211][T10223] device hsr_slave_1 entered promiscuous mode [ 538.369633][T10223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.377247][T10223] Cannot create hsr debugfs directory [ 538.406535][T10217] device veth0_vlan entered promiscuous mode [ 538.429691][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.438469][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.461947][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.483567][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.503098][T10166] device veth1_macvtap entered promiscuous mode [ 538.556100][T10217] device veth1_vlan entered promiscuous mode [ 538.570849][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 538.590464][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 538.609783][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 538.618003][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.627117][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.667324][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.702537][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.725894][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.748779][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.770997][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.789473][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.812136][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.836289][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.859178][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.881178][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.905238][T10166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.071983][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 539.090335][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 539.136482][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.159440][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.179240][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.201341][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.219464][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.244995][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.268004][T10166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.289853][T10166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.314895][T10166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.463951][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 539.491388][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 539.510529][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 539.530391][ T3856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 539.557198][T10166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.579352][T10166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.588290][T10166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.610519][T10166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.622762][T10217] device veth0_macvtap entered promiscuous mode [ 540.649314][T10217] device veth1_macvtap entered promiscuous mode [ 541.871995][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.899423][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.919152][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.939307][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.963909][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.987241][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.009163][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.029215][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.049209][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.071794][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.089189][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.114160][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.136222][T10217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.168537][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.179749][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.330225][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.356190][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.376430][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.397284][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.419146][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.449283][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.469164][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.489143][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.509163][T10217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.529191][T10217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.551077][T10217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.567657][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.589859][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.610139][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.618535][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.643863][T10217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.683284][T10217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.709230][T10217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.717993][T10217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.770027][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 542.963927][ T3709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.982984][ T3709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.080349][ T9741] bio_check_eod: 2820 callbacks suppressed [ 543.080371][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.080371][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 543.081241][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.087869][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.087869][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 543.127782][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.127782][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 543.142474][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.142474][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 543.159528][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.159528][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 543.174989][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.174989][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 543.191322][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.191322][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 543.206080][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.206080][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 543.217348][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.222665][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.222665][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 543.244632][ T9741] syz.4.1937: attempt to access beyond end of device [ 543.244632][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 543.261560][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.334272][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.355560][ T3709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.387780][ T3709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.476433][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.673739][T10264] netlink: 'syz.3.2074': attribute type 5 has an invalid length. [ 544.391822][ T3795] device hsr_slave_0 left promiscuous mode [ 544.407785][ T3795] device hsr_slave_1 left promiscuous mode [ 544.442099][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.467774][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.485550][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.504111][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.520151][ T3795] device bridge_slave_1 left promiscuous mode [ 544.536747][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.558340][ T3795] device bridge_slave_0 left promiscuous mode [ 544.567168][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.599567][ T3795] device hsr_slave_0 left promiscuous mode [ 544.622690][ T3795] device hsr_slave_1 left promiscuous mode [ 544.629561][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.637441][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.645990][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.655539][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.675015][ T3795] device bridge_slave_1 left promiscuous mode [ 544.684033][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.702720][ T3795] device bridge_slave_0 left promiscuous mode [ 544.720734][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.729788][ T3856] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 544.756487][ T3795] device hsr_slave_0 left promiscuous mode [ 544.774273][ T3795] device hsr_slave_1 left promiscuous mode [ 544.790116][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.808103][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.828470][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.836344][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.856376][ T3795] device bridge_slave_1 left promiscuous mode [ 544.870728][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.890158][ T3795] device bridge_slave_0 left promiscuous mode [ 544.896791][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.126544][ T3795] device veth1_macvtap left promiscuous mode [ 545.143525][ T3795] device veth0_macvtap left promiscuous mode [ 545.158585][ T3795] device veth1_vlan left promiscuous mode [ 545.183302][ T3795] device veth0_vlan left promiscuous mode [ 545.204189][ T3795] device veth1_macvtap left promiscuous mode [ 545.219247][ T3795] device veth0_macvtap left promiscuous mode [ 545.236169][ T3795] device veth1_vlan left promiscuous mode [ 545.246328][ T3795] device veth0_vlan left promiscuous mode [ 545.267079][ T3795] device veth1_macvtap left promiscuous mode [ 545.279271][ T3795] device veth0_macvtap left promiscuous mode [ 545.285515][ T3795] device veth1_vlan left promiscuous mode [ 545.305756][ T3795] device veth0_vlan left promiscuous mode [ 545.330302][ T3856] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=6b.3f [ 545.352319][ T3856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.382372][ T3856] usb 5-1: config 0 descriptor?? [ 545.634176][ T3856] usb 5-1: USB disconnect, device number 10 [ 547.465846][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 547.586619][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 547.688524][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.830066][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.090551][ T9741] bio_check_eod: 2720 callbacks suppressed [ 548.090573][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.090573][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 548.113182][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.113182][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 548.129834][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.129834][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 548.145676][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.145676][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 548.163149][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.163149][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 548.178518][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.178518][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 548.195525][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.195525][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 548.211263][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.211263][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 548.229976][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.229976][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 548.245038][ T9741] syz.4.1937: attempt to access beyond end of device [ 548.245038][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 549.424725][ T3795] bond0 (unregistering): Released all slaves [ 550.652417][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 550.722566][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 550.850354][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.990148][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.516833][ T3795] bond0 (unregistering): Released all slaves [ 553.099281][ T9741] bio_check_eod: 2811 callbacks suppressed [ 553.099305][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.099305][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 553.121451][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.121451][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 553.138399][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.138399][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 553.155739][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.155739][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 553.171308][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.171308][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 553.188383][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.188383][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 553.203522][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.203522][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 553.219994][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.219994][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 553.235071][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.235071][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 553.251635][ T9741] syz.4.1937: attempt to access beyond end of device [ 553.251635][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 553.891070][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 554.131037][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 554.350299][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.470767][ T3564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 554.483742][ T3564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 554.493704][ T3564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 554.504238][ T3564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 554.528007][ T3564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 554.537974][ T3564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 554.614603][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.868439][ T3795] bond0 (unregistering): Released all slaves [ 556.599785][ T3562] Bluetooth: hci0: command tx timeout [ 557.201023][ T3564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.213588][ T3564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.223164][ T3564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.234250][ T3564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.242633][ T3564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 557.250954][ T3564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 558.109143][ T9741] bio_check_eod: 2842 callbacks suppressed [ 558.109165][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.109165][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 558.131412][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.131412][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 558.146306][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.146306][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 558.162392][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.162392][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 558.177423][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.177423][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 558.193794][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.193794][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 558.208538][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.208538][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 558.224409][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.224409][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 558.239248][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.239248][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 558.256017][ T9741] syz.4.1937: attempt to access beyond end of device [ 558.256017][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 558.679547][ T3562] Bluetooth: hci0: command tx timeout [ 558.828526][T10280] chnl_net:caif_netlink_parms(): no params data found [ 559.320456][ T3562] Bluetooth: hci1: command tx timeout [ 559.421875][T10280] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.443546][T10280] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.475053][T10280] device bridge_slave_0 entered promiscuous mode [ 559.535361][T10280] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.545463][T10280] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.580918][T10280] device bridge_slave_1 entered promiscuous mode [ 559.672863][T10280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.711993][T10280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.760100][ T3562] Bluetooth: hci0: command tx timeout [ 561.400456][ T3562] Bluetooth: hci1: command tx timeout [ 562.689502][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.696353][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.839446][ T3562] Bluetooth: hci0: command tx timeout [ 563.120029][ T9741] bio_check_eod: 2731 callbacks suppressed [ 563.120052][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.120052][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 563.140740][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.140740][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 563.157063][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.157063][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 563.171787][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.171787][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 563.188400][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.188400][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 563.203159][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.203159][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 563.219581][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.219581][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 563.234363][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.234363][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 563.250768][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.250768][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 563.265559][ T9741] syz.4.1937: attempt to access beyond end of device [ 563.265559][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 563.479549][ T3562] Bluetooth: hci1: command tx timeout [ 565.559297][ T3562] Bluetooth: hci1: command tx timeout [ 568.129270][ T9741] bio_check_eod: 2649 callbacks suppressed [ 568.129293][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.129293][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 568.151801][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.151801][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 568.167012][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.167012][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 568.183982][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.183982][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 568.198934][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.198934][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 568.215972][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.215972][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 568.230943][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.230943][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 568.247386][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.247386][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 568.263051][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.263051][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 568.280032][ T9741] syz.4.1937: attempt to access beyond end of device [ 568.280032][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 570.480429][ T3564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.492147][ T3564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.503663][ T3564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.512982][ T3550] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.523125][ T3550] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 570.531179][ T3550] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 571.640938][ T28] INFO: task syz.4.1937:9775 blocked for more than 144 seconds. [ 571.648817][ T28] Not tainted 6.1.98-syzkaller #0 [ 571.669176][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.677992][ T28] task:syz.4.1937 state:D stack:26136 pid:9775 ppid:8544 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.729617][ T28] Call Trace: [ 571.733238][ T28] [ 571.736208][ T28] __schedule+0x142d/0x4550 [ 571.786595][ T28] ? __sched_text_start+0x8/0x8 [ 571.799403][ T28] ? print_irqtrace_events+0x210/0x210 [ 571.805017][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 571.849967][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 571.855945][ T28] schedule+0xbf/0x180 [ 571.899155][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 571.904995][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 571.939369][ T28] ? down_write_killable_nested+0x90/0x90 [ 571.945174][ T28] ? read_lock_is_recursive+0x10/0x10 [ 571.999214][ T28] ? ima_lsm_policy_change+0x620/0x620 [ 572.004880][ T28] ? rwsem_write_trylock+0x166/0x210 [ 572.049160][ T28] ? clear_nonspinnable+0x60/0x60 [ 572.054295][ T28] process_measurement+0x446/0x21b0 [ 572.093834][ T28] ? mark_lock+0x9a/0x340 [ 572.098303][ T28] ? ima_file_mmap+0x1c0/0x1c0 [ 572.139224][ T28] ? dquot_initialize+0x20/0x20 [ 572.144271][ T28] ? aa_get_current_label+0x111/0x1d0 [ 572.179958][ T28] ? apparmor_current_getsecid_subj+0xac/0x110 [ 572.186213][ T28] ima_file_check+0xed/0x170 [ 572.229316][ T28] ? do_dentry_open+0xce4/0x10f0 [ 572.234341][ T28] ? ima_bprm_check+0x2b0/0x2b0 [ 572.323691][ T28] path_openat+0x2687/0x2e60 [ 572.328412][ T28] ? mark_lock+0x9a/0x340 [ 572.369653][ T28] ? do_filp_open+0x480/0x480 [ 572.374664][ T28] do_filp_open+0x230/0x480 [ 572.389101][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 572.393805][ T28] ? _raw_spin_unlock+0x24/0x40 [ 572.398788][ T28] ? alloc_fd+0x59c/0x640 [ 572.430503][ T28] do_sys_openat2+0x13b/0x4f0 [ 572.435785][ T28] ? kasan_quarantine_put+0xd4/0x220 [ 572.479628][ T28] ? do_sys_open+0x220/0x220 [ 572.484453][ T28] ? kmem_cache_free+0x292/0x510 [ 572.499221][ T28] __x64_sys_openat+0x243/0x290 [ 572.509253][ T28] ? __ia32_sys_open+0x270/0x270 [ 572.514359][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 572.549410][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 572.554952][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 572.589341][ T28] do_syscall_64+0x3b/0xb0 [ 572.594582][ T28] ? clear_bhb_loop+0x45/0xa0 [ 572.599951][ T3562] Bluetooth: hci3: command tx timeout [ 572.619130][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.625377][ T28] RIP: 0033:0x7f0fee975bd9 [ 572.719191][ T28] RSP: 002b:00007f0fef719048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.728642][ T28] RAX: ffffffffffffffda RBX: 00007f0feeb04038 RCX: 00007f0fee975bd9 [ 572.769194][ T28] RDX: 0000000000183341 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 572.777774][ T28] RBP: 00007f0fee9e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 572.829213][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.837266][ T28] R13: 000000000000006e R14: 00007f0feeb04038 R15: 00007ffc758006e8 [ 572.879315][ T28] [ 572.882693][ T28] INFO: task syz.4.1937:9779 blocked for more than 145 seconds. [ 572.913064][ T28] Not tainted 6.1.98-syzkaller #0 [ 572.918764][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.959084][ T28] task:syz.4.1937 state:D stack:26040 pid:9779 ppid:8544 flags:0x00004004 [ 572.968642][ T28] Call Trace: [ 573.009200][ T28] [ 573.012386][ T28] __schedule+0x142d/0x4550 [ 573.039527][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 573.049214][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 573.054523][ T28] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 573.090808][ T28] ? __sched_text_start+0x8/0x8 [ 573.095844][ T28] ? rwsem_spin_on_owner+0x157/0x2e0 [ 573.129353][ T28] schedule+0xbf/0x180 [ 573.134381][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 573.140759][ T9741] bio_check_eod: 2639 callbacks suppressed [ 573.140783][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.140783][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 573.161668][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.161668][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 573.169253][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 573.178119][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.178119][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 573.196382][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.196382][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 573.209225][ T28] ? down_write_killable_nested+0x90/0x90 [ 573.213057][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.213057][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 573.215704][ T28] ? read_lock_is_recursive+0x10/0x10 [ 573.230724][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.230724][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 573.251837][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.251837][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 573.266607][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.266607][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 573.279300][ T28] ? rwsem_write_trylock+0x166/0x210 [ 573.283504][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.283504][ T9741] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 573.285885][ T28] ? clear_nonspinnable+0x60/0x60 [ 573.300588][ T9741] syz.4.1937: attempt to access beyond end of device [ 573.300588][ T9741] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 573.369177][ T28] f2fs_issue_checkpoint+0x2d2/0x4d0 [ 573.374551][ T28] ? f2fs_destroy_checkpoint_caches+0x20/0x20 [ 573.409334][ T28] ? d_instantiate_new+0x7b/0x110 [ 573.414443][ T28] ? f2fs_create+0x7a7/0xa10 [ 573.430912][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 573.436037][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 573.469264][ T28] ? f2fs_sync_fs+0x201/0x410 [ 573.474021][ T28] f2fs_create+0x862/0xa10 [ 573.478497][ T28] ? f2fs_lookup+0xae0/0xae0 [ 573.509155][ T28] path_openat+0x12f1/0x2e60 [ 573.513907][ T28] ? do_filp_open+0x480/0x480 [ 573.518651][ T28] do_filp_open+0x230/0x480 [ 573.549311][ T28] ? vfs_tmpfile+0x4a0/0x4a0 [ 573.554005][ T28] ? _raw_spin_unlock+0x24/0x40 [ 573.558905][ T28] ? alloc_fd+0x59c/0x640 [ 573.599092][ T28] do_sys_openat2+0x13b/0x4f0 [ 573.603869][ T28] ? do_sys_open+0x220/0x220 [ 573.608515][ T28] __x64_sys_openat+0x243/0x290 [ 573.639891][ T28] ? __ia32_sys_open+0x270/0x270 [ 573.645004][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 573.679232][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 573.684505][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 573.719615][ T28] do_syscall_64+0x3b/0xb0 [ 573.724182][ T28] ? clear_bhb_loop+0x45/0xa0 [ 573.728935][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 573.760498][ T28] RIP: 0033:0x7f0fee975bd9 [ 573.765172][ T28] RSP: 002b:00007f0fef6f8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 573.800836][ T28] RAX: ffffffffffffffda RBX: 00007f0feeb04110 RCX: 00007f0fee975bd9 [ 573.808987][ T28] RDX: 00000000000026e1 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 573.859315][ T28] RBP: 00007f0fee9e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 573.867446][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.909496][ T28] R13: 000000000000006e R14: 00007f0feeb04110 R15: 00007ffc758006e8 [ 573.917709][ T28] [ 573.921118][ T28] [ 573.921118][ T28] Showing all locks held in the system: [ 573.959666][ T28] 1 lock held by rcu_tasks_kthre/12: [ 573.965015][ T28] #0: ffffffff8d12aed0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 573.999148][ T28] 1 lock held by rcu_tasks_trace/13: [ 574.004495][ T28] #0: ffffffff8d12b6d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 574.069110][ T28] 1 lock held by khungtaskd/28: [ 574.074029][ T28] #0: ffffffff8d12ad00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 574.109312][ T28] 2 locks held by getty/3303: [ 574.114139][ T28] #0: ffff88814bd53098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 574.149205][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 574.189165][ T28] 3 locks held by kworker/0:8/3743: [ 574.194510][ T28] 4 locks held by kworker/u4:9/3795: [ 574.229131][ T28] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.259256][ T28] #1: ffffc90005137d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.289309][ T28] #2: ffffffff8e28d8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 574.298727][ T28] #3: ffffffff8d1301c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 574.346658][ T28] 4 locks held by kworker/u4:11/3852: [ 574.369380][ T28] #0: ffff888144e6a938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.409204][ T28] #1: ffffc9000538fd20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.439194][ T28] #2: ffff88801925e0e0 (&type->s_umount_key#83){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 574.479273][ T28] #3: ffff88807aedd140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 574.509417][ T28] 2 locks held by kworker/1:11/3854: [ 574.514763][ T28] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.549299][ T28] #1: ffffc900051b7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.589113][ T28] 3 locks held by kworker/u4:14/4228: [ 574.594566][ T28] 3 locks held by kworker/1:19/7052: [ 574.629392][ T28] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.653908][ T28] #1: ffffc90004837d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 574.679457][ T3562] Bluetooth: hci3: command tx timeout [ 574.699137][ T28] #2: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 574.708203][ T28] 5 locks held by syz.4.1937/9741: [ 574.743733][ T28] 2 locks held by syz.4.1937/9775: [ 574.748909][ T28] #0: ffff88801925e460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 574.788336][ T28] #1: ffff88805d5b3690 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: process_measurement+0x446/0x21b0 [ 574.839819][ T28] 3 locks held by syz.4.1937/9779: [ 574.845017][ T28] #0: ffff88801925e460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 574.879293][ T28] #1: ffff88805d5b1310 (&type->i_mutex_dir_key#16){+.+.}-{3:3}, at: path_openat+0x7b6/0x2e60 [ 574.909424][ T28] #2: ffff88807aedd140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2d2/0x4d0 [ 574.939338][ T28] 1 lock held by syz-executor/10166: [ 574.944681][ T28] #0: ffffffff8d1301c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 574.999457][ T28] 5 locks held by syz-executor/10214: [ 575.004903][ T28] #0: ffff88807e42e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 575.039223][ T28] #1: ffff88805c19a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 575.063438][ T28] #2: ffff888145b1d918 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 575.109237][ T28] #3: ffffffff8dc0cf88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 575.139083][ T28] #4: ffff888063eef0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880 [ 575.181080][ T28] 3 locks held by syz-executor/10220: [ 575.186518][ T28] 4 locks held by syz-executor/10223: [ 575.219231][ T28] #0: ffff88807e42e460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 575.228311][ T28] #1: ffff88805e5e3088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0 [ 575.279193][ T28] #2: ffff888145b1d918 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0 [ 575.309398][ T28] #3: ffffffff8dc0cf88 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480 [ 575.339220][ T28] 1 lock held by syz.3.2074/10264: [ 575.344387][ T28] #0: ffffffff8d1301c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 575.389136][ T28] 2 locks held by syz-executor/10280: [ 575.394567][ T28] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 575.429135][ T28] #1: ffffffff8d1302f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 575.469332][ T28] 1 lock held by syz-executor/10285: [ 575.479370][ T28] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xadf/0x2050 [ 575.488527][ T28] 1 lock held by syz-executor/10293: [ 575.529285][ T28] #0: ffffffff8e299c28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 575.538957][ T28] [ 575.569205][ T28] ============================================= [ 575.569205][ T28] [ 575.599145][ T28] NMI backtrace for cpu 1 [ 575.603627][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 575.611556][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 575.621647][ T28] Call Trace: [ 575.625034][ T28] [ 575.627989][ T28] dump_stack_lvl+0x1e3/0x2cb [ 575.632713][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 575.638221][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 575.643721][ T28] ? panic+0x764/0x764 [ 575.647821][ T28] ? vprintk_emit+0x622/0x740 [ 575.652537][ T28] ? printk_sprint+0x490/0x490 [ 575.657341][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 575.662497][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 575.667484][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 575.673787][ T28] ? _printk+0xd1/0x111 [ 575.677975][ T28] ? panic+0x764/0x764 [ 575.682087][ T28] ? __wake_up_klogd+0xcc/0x100 [ 575.687144][ T28] ? panic+0x764/0x764 [ 575.691245][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 575.697350][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 575.703458][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 575.709482][ T28] watchdog+0xf88/0xfd0 [ 575.713688][ T28] ? watchdog+0x1f8/0xfd0 [ 575.718062][ T28] kthread+0x28d/0x320 [ 575.722186][ T28] ? hungtask_pm_notify+0x50/0x50 [ 575.727283][ T28] ? kthread_blkcg+0xd0/0xd0 [ 575.731910][ T28] ret_from_fork+0x1f/0x30 [ 575.736375][ T28] [ 575.740464][ T28] Sending NMI from CPU 1 to CPUs 0: [ 575.746147][ C0] NMI backtrace for cpu 0 [ 575.746159][ C0] CPU: 0 PID: 9741 Comm: syz.4.1937 Not tainted 6.1.98-syzkaller #0 [ 575.746178][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 575.746189][ C0] RIP: 0010:lock_is_held_type+0x91/0x180 [ 575.746216][ C0] Code: 24 24 fa 48 c7 c7 20 0f ec 8a e8 9a 16 00 00 65 ff 05 63 3c 77 75 41 83 bd d8 0a 00 00 00 7e 47 4c 89 ed 48 81 c5 e0 0a 00 00 <31> db 48 83 fb 31 73 24 48 89 ef 4c 89 fe e8 1c 02 00 00 85 c0 75 [ 575.746232][ C0] RSP: 0018:ffffc900047e6858 EFLAGS: 00000086 [ 575.746248][ C0] RAX: 0000000000000000 RBX: ffff88805ef4d458 RCX: ffff888026e31dc0 [ 575.746262][ C0] RDX: 0000000000000000 RSI: ffffffff8aec0f20 RDI: ffffffff8b3d47e0 [ 575.746275][ C0] RBP: ffff888026e328a0 R08: ffffffff83ca7d6c R09: ffffc900047e7010 [ 575.746289][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 575.746301][ C0] R13: ffff888026e31dc0 R14: 00000000ffffffff R15: ffffffff8d12ac80 [ 575.746315][ C0] FS: 00007f0fef73a6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 575.746332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.746345][ C0] CR2: 00007fbc7be7f440 CR3: 000000006468d000 CR4: 00000000003506f0 [ 575.746361][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 575.746372][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 575.746384][ C0] Call Trace: [ 575.746389][ C0] [ 575.746395][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 575.746423][ C0] ? read_lock_is_recursive+0x10/0x10 [ 575.746452][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 575.746489][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 575.746516][ C0] ? nmi_handle+0x12e/0x440 [ 575.746543][ C0] ? nmi_handle+0x25/0x440 [ 575.746570][ C0] ? lock_is_held_type+0x91/0x180 [ 575.746589][ C0] ? default_do_nmi+0x62/0x150 [ 575.746607][ C0] ? exc_nmi+0xa8/0x100 [ 575.746624][ C0] ? end_repeat_nmi+0x16/0x31 [ 575.746652][ C0] ? do_garbage_collect+0x218c/0x81f0 [ 575.746682][ C0] ? lock_is_held_type+0x91/0x180 [ 575.746702][ C0] ? lock_is_held_type+0x91/0x180 [ 575.746723][ C0] ? lock_is_held_type+0x91/0x180 [ 575.746744][ C0] [ 575.746749][ C0] [ 575.746757][ C0] __might_resched+0xf0/0x780 [ 575.746775][ C0] ? read_lock_is_recursive+0x10/0x10 [ 575.746802][ C0] ? __might_sleep+0xb0/0xb0 [ 575.746821][ C0] ? do_garbage_collect+0x5ce4/0x81f0 [ 575.746852][ C0] down_read+0x8a/0xa30 [ 575.746872][ C0] ? do_garbage_collect+0x22d7/0x81f0 [ 575.746900][ C0] ? __down_common+0x8b0/0x8b0 [ 575.746919][ C0] ? __up_read+0x2b9/0x690 [ 575.746941][ C0] ? up_read+0x20/0x20 [ 575.746966][ C0] do_garbage_collect+0x21ed/0x81f0 [ 575.747025][ C0] ? get_victim_by_default+0x4019/0x6ff0 [ 575.747045][ C0] ? f2fs_gc+0x32a0/0x32a0 [ 575.747070][ C0] ? get_victim_by_default+0x6893/0x6ff0 [ 575.747093][ C0] ? mark_lock+0x9a/0x340 [ 575.747125][ C0] ? f2fs_gc+0xef4/0x32a0 [ 575.747151][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 575.747183][ C0] ? up_write+0x19d/0x580 [ 575.747204][ C0] ? get_ckpt_valid_blocks+0x260/0x260 [ 575.747223][ C0] ? __up_read+0x690/0x690 [ 575.747248][ C0] f2fs_gc+0x1169/0x32a0 [ 575.747289][ C0] ? f2fs_start_bidx_of_node+0x370/0x370 [ 575.747325][ C0] ? rwsem_write_trylock+0x166/0x210 [ 575.747356][ C0] f2fs_balance_fs+0x506/0x6c0 [ 575.747382][ C0] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 575.747407][ C0] ? __up_read+0x2b9/0x690 [ 575.747431][ C0] ? folio_unlock+0x122/0x2f0 [ 575.747460][ C0] f2fs_map_blocks+0x2871/0x3ab0 [ 575.747496][ C0] ? f2fs_do_map_lock+0x70/0x70 [ 575.747522][ C0] expand_inode_data+0x56d/0xaf0 [ 575.747548][ C0] ? f2fs_insert_range+0x3c0/0x3c0 [ 575.747564][ C0] ? file_modified_flags+0x3e1/0x480 [ 575.747596][ C0] ? rcu_read_lock_any_held+0xb3/0x160 [ 575.747622][ C0] f2fs_fallocate+0x44a/0x9f0 [ 575.747651][ C0] vfs_fallocate+0x547/0x6b0 [ 575.747677][ C0] do_vfs_ioctl+0x222c/0x2a90 [ 575.747696][ C0] ? __x64_compat_sys_ioctl+0x80/0x80 [ 575.747713][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 575.747738][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 575.747760][ C0] ? __kmem_cache_free+0x25c/0x3c0 [ 575.747785][ C0] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 575.747805][ C0] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 575.747823][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 575.747849][ C0] ? __fget_files+0x28/0x4a0 [ 575.747874][ C0] ? __fget_files+0x28/0x4a0 [ 575.747891][ C0] ? __fget_files+0x435/0x4a0 [ 575.747908][ C0] ? __fget_files+0x28/0x4a0 [ 575.747927][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 575.747945][ C0] ? security_file_ioctl+0x7d/0xa0 [ 575.747964][ C0] __se_sys_ioctl+0x81/0x160 [ 575.747996][ C0] do_syscall_64+0x3b/0xb0 [ 575.748021][ C0] ? clear_bhb_loop+0x45/0xa0 [ 575.748046][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.748070][ C0] RIP: 0033:0x7f0fee975bd9 [ 575.748085][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.748099][ C0] RSP: 002b:00007f0fef73a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.748116][ C0] RAX: ffffffffffffffda RBX: 00007f0feeb03f60 RCX: 00007f0fee975bd9 [ 575.748129][ C0] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 575.748142][ C0] RBP: 00007f0fee9e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 575.748153][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.748164][ C0] R13: 000000000000000b R14: 00007f0feeb03f60 R15: 00007ffc758006e8 [ 575.748183][ C0] [ 576.589238][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 576.596145][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.98-syzkaller #0 [ 576.603975][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 576.614058][ T28] Call Trace: [ 576.617359][ T28] [ 576.620308][ T28] dump_stack_lvl+0x1e3/0x2cb [ 576.625031][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 576.630536][ T28] ? panic+0x764/0x764 [ 576.634633][ T28] ? llist_add_batch+0x160/0x1d0 [ 576.639723][ T28] ? vscnprintf+0x59/0x80 [ 576.644114][ T28] panic+0x318/0x764 [ 576.648124][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 576.654314][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 576.659721][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 576.665908][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 576.672113][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 576.678305][ T28] watchdog+0xfc7/0xfd0 [ 576.682496][ T28] ? watchdog+0x1f8/0xfd0 [ 576.686866][ T28] kthread+0x28d/0x320 [ 576.690957][ T28] ? hungtask_pm_notify+0x50/0x50 [ 576.696012][ T28] ? kthread_blkcg+0xd0/0xd0 [ 576.700630][ T28] ret_from_fork+0x1f/0x30 [ 576.705094][ T28] [ 576.708434][ T28] Kernel Offset: disabled [ 576.712771][ T28] Rebooting in 86400 seconds..